Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/fdca9aaf-c4f1-3ee7-840d-a8fb3ddf97cd.roa
File:                     fdca9aaf-c4f1-3ee7-840d-a8fb3ddf97cd.roa (raw, json)
Hash identifier:          4G+mw7zhVke3dh+G0oalj5E5Vb3U7Ki4TX6rPPnkD8Y=
Subject key identifier:   CB:10:30:2F:E2:CA:45:B2:B2:FC:FC:15:77:87:74:7D:DC:80:A9:A5
Certificate issuer:       /CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b
Certificate serial:       010D0C9F43285847DF2F50947FE5F34F800BBC00
Authority key identifier: DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/fdca9aaf-c4f1-3ee7-840d-a8fb3ddf97cd.roa
Signing time:             Thu 14 Nov 2024 02:00:27 +0000
ROA not before:           Thu 14 Nov 2024 02:00:27 +0000
ROA not after:            Wed 12 Feb 2025 02:00:27 +0000
asID:                     54702
IP address blocks:        2620:130:a000::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:df:2f:50:94:7f:e5:f3:4f:80:0b:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b
        Validity
            Not Before: Nov 14 02:00:27 2024 GMT
            Not After : Feb 12 02:00:27 2025 GMT
        Subject: CN=bd4752bc-7b33-4fb0-8664-e0acd5f32859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e4:da:dc:85:e1:9a:30:15:31:62:59:c4:81:
                    47:16:6d:eb:96:ef:83:d6:44:f2:35:51:9d:43:55:
                    c9:8a:69:dc:39:02:29:9e:f5:95:12:41:97:40:c4:
                    2c:2a:41:63:87:c4:68:99:66:77:cb:c0:16:76:e1:
                    b4:1e:6f:c8:a6:c7:30:bf:55:bf:2e:08:c5:45:bf:
                    c7:08:67:af:5f:6f:d6:99:c8:78:45:a5:b1:6c:c8:
                    69:0d:f1:59:7a:7b:d5:7d:21:47:98:75:7d:78:8f:
                    93:4c:62:72:f7:c9:cf:2d:17:a4:1a:ef:57:d0:16:
                    cc:54:00:45:43:a1:74:99:2a:31:28:ff:7a:4c:c8:
                    b5:89:90:40:ba:0d:6b:36:e5:a1:6c:e4:33:d3:71:
                    09:50:44:02:94:ba:4a:6a:39:1f:23:79:d9:82:29:
                    3c:b9:c0:ff:2c:f9:08:67:17:91:77:3f:af:76:ed:
                    83:c0:6a:a4:11:e8:98:c0:ac:76:fc:ce:18:4c:e3:
                    ab:50:68:fe:17:f3:8e:81:29:c7:12:b1:a8:d2:fc:
                    bb:81:06:ce:85:60:ec:e2:28:8f:3e:26:e5:7f:85:
                    96:c9:26:15:82:a6:b7:39:e1:8d:3a:13:93:a2:37:
                    64:f6:a5:22:b6:91:f4:0e:58:03:e8:04:58:17:b3:
                    3e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:10:30:2F:E2:CA:45:B2:B2:FC:FC:15:77:87:74:7D:DC:80:A9:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/fdca9aaf-c4f1-3ee7-840d-a8fb3ddf97cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl

            X509v3 Authority Key Identifier:
                keyid:DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:130:a000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:9e:f6:bb:df:4a:b0:25:02:7e:2d:69:cb:b0:58:87:1a:b8:
         ca:93:8b:cd:1a:d6:2b:f5:92:ef:a6:d5:d3:1f:dd:d2:3e:9f:
         bd:38:56:22:c6:e3:d8:d9:fd:a6:15:a3:0d:df:d2:9c:e4:73:
         73:67:83:99:b1:fa:90:d8:c1:3e:54:df:8a:d3:e9:55:51:9a:
         ac:19:37:0b:eb:88:49:cb:f9:6a:77:94:33:35:2f:2d:f2:d9:
         94:b2:4f:7e:ae:5d:0e:7f:f7:fb:ed:0f:1e:df:ef:03:8f:29:
         8b:a9:5c:5e:b1:70:65:5c:ca:00:65:f6:4d:7c:63:24:e6:f5:
         fb:19:ea:8c:56:4d:a7:15:d9:a2:3c:af:6d:6c:45:83:cc:3b:
         63:a1:e3:af:99:5d:4e:55:2e:dd:66:eb:14:e4:32:bd:28:c0:
         f1:c5:6d:1e:ae:c7:f9:5e:27:d6:dc:af:f3:be:ca:58:ef:5f:
         57:4e:56:b6:0b:24:51:50:4f:aa:ae:a7:17:fe:03:48:a5:ba:
         af:47:87:6f:f0:7e:5d:69:2f:87:43:eb:aa:23:dd:7f:ab:16:
         a2:42:e7:e0:e0:bd:65:2f:78:e4:c4:24:5b:12:5e:84:da:cf:
         d9:9a:a9:60:37:9b:18:7c:db:8b:be:19:56:8d:4b:f7:20:19:
         98:5f:db:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:28:09 2024 by rpki-client on console-ams.rpki-client.org